Isn't the Cursor Marketplace separate from VSCode's? Maybe it's as simple as someone impersonating Anthropic because they never registered there? Code signing alone wouldn't help in cases like that.

i work for a large company that’s trying to curate vs code extensions, and this doesn’t make it easy.

we automatically block extensions and require that extensions must be approved, but this is a tedious process.

Is there finally a use for blockchain?